This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/FwjQJ3o4_f5_kIRJPL1fhc8wPs0.roa File: FwjQJ3o4_f5_kIRJPL1fhc8wPs0.roa (raw, json) Hash identifier: b+lMbH7aGqXO1dA4OC3I2proSJvRuAwpdIs6UIwXrBc= Subject key identifier: 17:08:D0:27:7A:38:FD:FE:7F:90:84:49:3C:BD:5F:85:CF:30:3E:CD Certificate issuer: /CN=eacb96413ac8f2c16b94795689174d7a72201ef5 Certificate serial: 019B7BA4D5AB40EB8D2DBA4B0051EEA3A86A Authority key identifier: EA:CB:96:41:3A:C8:F2:C1:6B:94:79:56:89:17:4D:7A:72:20:1E:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/FwjQJ3o4_f5_kIRJPL1fhc8wPs0.roa Signing time: Thu 01 Jan 2026 22:19:18 +0000 ROA not before: Thu 01 Jan 2026 22:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20634 IP address blocks: 80.66.224.0/20 maxlen: 20 80.66.224.0/23 maxlen: 23 80.66.226.0/23 maxlen: 23 80.66.228.0/23 maxlen: 23 80.66.230.0/23 maxlen: 23 80.66.232.0/23 maxlen: 23 80.66.234.0/23 maxlen: 23 80.66.236.0/23 maxlen: 23 80.66.238.0/23 maxlen: 23 80.72.48.0/20 maxlen: 20 80.248.192.0/20 maxlen: 20 89.248.144.0/20 maxlen: 20 185.112.48.0/22 maxlen: 22 217.173.224.0/20 maxlen: 20 217.173.224.0/23 maxlen: 23 217.173.226.0/23 maxlen: 23 217.173.228.0/23 maxlen: 23 217.173.230.0/23 maxlen: 23 217.173.232.0/23 maxlen: 23 217.173.234.0/23 maxlen: 23 217.173.236.0/23 maxlen: 23 217.173.238.0/23 maxlen: 23 2a00:ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.crl rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d5:ab:40:eb:8d:2d:ba:4b:00:51:ee:a3:a8:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eacb96413ac8f2c16b94795689174d7a72201ef5 Validity Not Before: Jan 1 22:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1708d0277a38fdfe7f9084493cbd5f85cf303ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:46:9c:79:90:44:f8:a3:2e:ab:02:d8:f6:17: 5e:9f:2e:03:ec:86:8e:9a:d6:17:99:9d:dd:02:b1: e4:7b:73:05:ea:8b:42:61:aa:bb:1c:b6:61:d8:c4: 14:d6:17:77:d7:34:cc:b2:a4:d0:8d:75:a8:9d:09: 01:e9:fd:41:fe:af:bc:c0:e5:a0:4a:3e:b9:15:a0: a6:eb:5f:1b:cd:37:a5:9a:55:66:0b:4f:e2:c8:b0: aa:72:63:20:fd:6a:ea:bf:2f:81:ef:72:88:86:af: 5f:d5:9d:4a:28:34:02:39:ad:4e:9f:9d:d7:1a:75: 91:73:9d:4b:d4:f2:27:e3:47:3e:aa:81:67:1e:1b: fc:ad:09:61:34:15:a4:ea:50:6a:0d:42:f2:7a:72: 80:39:c3:a0:c0:83:5e:23:79:91:5f:35:88:9c:f9: 0e:7c:f4:47:e7:0b:3d:bd:15:fe:6b:c4:49:ca:05: 99:66:68:e2:37:c8:34:e4:84:a7:23:1a:04:48:67: cc:55:55:d4:7d:11:bb:e5:7c:33:b2:39:70:60:ce: 90:e2:75:ba:6e:eb:00:e7:aa:a0:48:04:07:93:95: 71:5b:2e:fd:7d:a6:f6:1b:1b:f2:b7:09:45:00:49: e4:9a:1c:ad:12:aa:8f:ea:63:02:b3:ba:dd:08:7d: 31:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:08:D0:27:7A:38:FD:FE:7F:90:84:49:3C:BD:5F:85:CF:30:3E:CD X509v3 Authority Key Identifier: keyid:EA:CB:96:41:3A:C8:F2:C1:6B:94:79:56:89:17:4D:7A:72:20:1E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/FwjQJ3o4_f5_kIRJPL1fhc8wPs0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.66.224.0/20 80.72.48.0/20 80.248.192.0/20 89.248.144.0/20 185.112.48.0/22 217.173.224.0/20 IPv6: 2a00:ec0::/32 Signature Algorithm: sha256WithRSAEncryption af:4e:fd:a3:28:66:ed:0c:b4:ea:43:c5:2e:7b:4e:40:5e:6b: c0:d0:f1:65:f2:87:cc:c4:e3:d0:fe:bd:9e:77:04:89:a1:3f: a7:2d:55:1a:69:09:87:d8:00:65:6c:b8:17:9d:f6:6d:6e:ec: 95:b7:37:b1:aa:4a:8e:fc:85:56:c8:f3:06:26:d3:af:dc:e3: 73:a6:fa:b2:b8:d9:4f:2a:a2:7f:83:cc:e4:f4:df:b8:d1:be: 4f:a3:85:f1:8e:b3:f9:fb:5c:f2:4a:a8:42:ec:0d:e8:cd:6a: ff:c4:52:10:79:99:74:b9:fd:1d:a7:56:14:98:71:7e:46:da: 01:66:2f:82:75:23:c1:5e:d6:31:36:24:a8:7c:df:02:b4:c3: 8f:60:45:1e:0b:6a:b0:7e:b5:c3:7a:a6:b2:ad:31:96:3d:4b: 47:81:4a:47:c0:d4:7c:6c:61:7c:80:eb:73:3a:33:f1:11:8b: d2:16:bf:96:79:f3:a5:49:3a:e6:d7:17:69:32:66:eb:d8:1e: 90:b6:cd:0f:12:43:dd:eb:12:6c:25:c4:32:22:36:9f:30:8a: 7f:76:13:d8:2c:13:56:1f:c2:bf:f4:ba:28:97:70:7d:6c:5b: 3d:85:b7:3d:ad:71:46:da:6a:36:d3:9f:6e:bf:ef:94:06:15: 08:1f:3c:90 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt7pNWrQOuNLbpLAFHuo6hqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhY2I5NjQxM2FjOGYyYzE2Yjk0Nzk1Njg5MTc0ZDdhNzIy MDFlZjUwHhcNMjYwMTAxMjIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzA4ZDAyNzdhMzhmZGZlN2Y5MDg0NDkzY2JkNWY4NWNmMzAzZWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00aceZBE+KMuqwLY9hdeny4D7IaO mtYXmZ3dArHke3MF6otCYaq7HLZh2MQU1hd31zTMsqTQjXWonQkB6f1B/q+8wOWg Sj65FaCm618bzTelmlVmC0/iyLCqcmMg/Wrqvy+B73KIhq9f1Z1KKDQCOa1On53X GnWRc51L1PIn40c+qoFnHhv8rQlhNBWk6lBqDULyenKAOcOgwINeI3mRXzWInPkO fPRH5ws9vRX+a8RJygWZZmjiN8g05ISnIxoESGfMVVXUfRG75XwzsjlwYM6Q4nW6 busA56qgSAQHk5VxWy79fab2GxvytwlFAEnkmhytEqqP6mMCs7rdCH0xKwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFBcI0Cd6OP3+f5CESTy9X4XPMD7NMB8GA1UdIwQY MBaAFOrLlkE6yPLBa5R5VokXTXpyIB71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnN1V1FUckk4c0ZybEhsV2lSZE5lbklnSHZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kNDFkZjctOTQxZC00N2FlLWIxNWMt MzdmZTZiNjVmNjhmLzEvRndqUUozbzRfZjVfa0lSSlBMMWZoYzh3UHMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9kNDFkZjctOTQxZC00N2FlLWIxNWMtMzdmZTZiNjVmNjhm LzEvNnN1V1FUckk4c0ZybEhsV2lSZE5lbklnSHZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEUELgAwQE UEgwAwQEUPjAAwQEWfiQAwQCuXAwAwQE2a3gMA0EAgACMAcDBQAqAA7AMA0GCSqG SIb3DQEBCwUAA4IBAQCvTv2jKGbtDLTqQ8Uue05AXmvA0PFl8ofMxOPQ/r2edwSJ oT+nLVUaaQmH2ABlbLgXnfZtbuyVtzexqkqO/IVWyPMGJtOv3ONzpvqyuNlPKqJ/ g8zk9N+40b5Po4XxjrP5+1zySqhC7A3ozWr/xFIQeZl0uf0dp1YUmHF+RtoBZi+C dSPBXtYxNiSofN8CtMOPYEUeC2qwfrXDeqayrTGWPUtHgUpHwNR8bGF8gOtzOjPx EYvSFr+WefOlSTrm1xdpMmbr2B6Qts0PEkPd6xJsJcQyIjafMIp/dhPYLBNWH8K/ 9Lool3B9bFs9hbc9rXFG2mo2059uv++UBhUIHzyQ -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:07 2026 by rpki-client